IT-friendly overview of security and privacy practices, governance basics, and links to official policies for reviews.